UniToken Integration Guide FreeOTFE Secretfile

Install the PKI package

This part explains how to install the PKI package that you can find inside the SDK. The End User package can be found inside the folder Redist/Enduser.

1	Right-Click on the PKI package installation file and choose “Run as administrator” Execute the file with an account that has administrator rights on this computer.
2	Click on [Next] in the welcome screen.
3	Input your username and Company Name and click on [Next].
4	Select [Complete] and click on [Next].
5	Click on [Install] to begin the installation of the PKI package.
6	Verify that the install wizard completed correctly and click on [Finish].

Configure PKCS support in FreeOTFE

1	In the main menu, go to [Settings], [Security　Tokens].
2	In the [Options] window, [PKCS#11] tab, Check [Enable PKCS#11 support] and choose the library file. By default the PKI package will install this file in the Windows\System32\ folder. Choose where to save the settings in the field [Save above settings to] and click on OK to apply the settings.

Create an encrypted volume with FreeOTFE

1	To create a new encrypted volume, click on [New].
2	On the [FreeOTFE Volume Creation Wizard] welcome page, click on [Next] to start the volume creation procedure.
3	You can choose to store the encrypted volume as a file or to encrypt a whole partition/disk. Choose the one that fits the best to your needs. In our case, we chose to store the encrypted volume as a file. Click on [Next] to continue.
4	Choose where you want to store the volume and click on [Next] to continue.
5	Choose the size of your encrypted volume and click on [Next] to continue.
6	Keep the default encryption algorithms or change it depending on your needs. Click on [Next] to continue.
7	Choose the elements to use to secure your volume, the more you use elements, the more you can secure your volume. We have chosen to use Microsoft CryptoAPI and PKCS#11 token.
8	Check that you have selected the right UniToken and click on [Next] to continue.
9	Input a password for your encrypted volume. This doesn’t have to be the same password with your UniToken. Click on [Next] to continue.
10	Check that the details for the new volume creation are correct and click on [Finish] to create the volume.

Create a secret file inside UniToken and use it to secure your volume

1	Select [Tools] [PKCS#11 token management]
2	Input your User PIN for your UniToken and click on [OK]
3	In the [Secret Keys] tab, click on [New]. In the [New PKCS#11 Secret Key] window, input a name for your Secret Key and click on [OK]
4	Click on [OK] to close the information window confirming that the Secret Key was created successfully.
5	Select the Secret file that you created and click on [Secure].
6	Click on the icon corresponding to your type of volume (file or partition) and select the volume that you want to protect with the Secret Key. Click on [OK] to confirm.
7	Click on [Yes] to confirm that you want to protect the volume. A dialog pop will appear to confirm that the volume has been correctly protected.

Mount the encrypted volume

1	Click on [Mount file] and select your volume.
2	Enter the password for the volume and click on [Advanced].
3	In the [Security Token/Smartcard PIN] window, input your password and click on [OK] to confirm.
4	Select the right secret key for the volume and click on [OK] to mount the volume. If a wrong password or a wrong key is selected, you will not be able to access the volume. Both password for the volume and the secret key stored inside UniToken are required to access the volume.

Glossary

Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

Microsoft Cryptography API, MS-CAPI is an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.

PKCS refers to a group of public-key cryptography standards devised and published by RSA Security.